VpcFirewallCen

This class encapsulates and extends the ROS resource type ALIYUN::CLOUDFW::VpcFirewallCen.

Initializers

import ros_cdk_cloudfw
ros_cdk_cloudfw.VpcFirewallCen(
  scope: Construct,
  id: str,
  cen_id: typing.Union[str, IResolvable],
  firewall_switch: typing.Union[str, IResolvable],
  firewall_vpc_zone_id: typing.Union[str, IResolvable],
  network_instance_id: typing.Union[str, IResolvable],
  vpc_firewall_name: typing.Union[str, IResolvable],
  vpc_region: typing.Union[str, IResolvable],
  firewall_vpc_cidr_block: typing.Union[str, IResolvable] = None,
  firewall_v_switch_cidr_block: typing.Union[str, IResolvable] = None,
  member_uid: typing.Union[str, IResolvable] = None,
  v_switch_id: typing.Union[str, IResolvable] = None,
  enable_resource_property_constraint: bool = None
)

Name	Type	Description
scope	ros_cdk_core.Construct	No description.
id	str	No description.
cen_id	typing.Union[str, ros_cdk_core.IResolvable]	Property cenId: The ID of the CEN instance.
firewall_switch	typing.Union[str, ros_cdk_core.IResolvable]	Property firewallSwitch: Specifies whether to enable the VPC firewall.
firewall_vpc_zone_id	typing.Union[str, ros_cdk_core.IResolvable]	Property firewallVpcZoneId: The ID of the zone to which the vSwitch belongs.
network_instance_id	typing.Union[str, ros_cdk_core.IResolvable]	Property networkInstanceId: The ID of the VPC for which you want to create the VPC firewall.
vpc_firewall_name	typing.Union[str, ros_cdk_core.IResolvable]	Property vpcFirewallName: The instance name of the VPC firewall.
vpc_region	typing.Union[str, ros_cdk_core.IResolvable]	Property vpcRegion: The ID of the region to which the VPC belongs.
firewall_vpc_cidr_block	typing.Union[str, ros_cdk_core.IResolvable]	Property firewallVpcCidrBlock: The CIDR block of the VPC that is automatically created for the VPC firewall.
firewall_v_switch_cidr_block	typing.Union[str, ros_cdk_core.IResolvable]	Property firewallVSwitchCidrBlock: The CIDR block of the vSwitch that is automatically created for the VPC firewall.You must specify a CIDR block for the Cloud_Firewall_VSWITCH VPC that is automatically created for the VPC firewall for traffic redirection. The CIDR block does not conflict with your network plan. The subnet mask of the CIDR block must be less than or equal to 29 bits in length. The CIDR block of the vSwitch must be within the network segment of the VPC.If you do not specify a value, the CIDR block 10.219.219.216\/29 is automatically allocated.
member_uid	typing.Union[str, ros_cdk_core.IResolvable]	Property memberUid: The UID of the member that is managed by your Alibaba Cloud account.
v_switch_id	typing.Union[str, ros_cdk_core.IResolvable]	Property vSwitchId: The ID of the vSwitch that is used to associate with the elastic network interface (ENI) required by the VPC firewall.
enable_resource_property_constraint	bool	No description.

---

scope^Required

• Type: ros_cdk_core.Construct

---

id^Required

• Type: str

---

cen_id^Required

• Type: typing.Union[str, ros_cdk_core.IResolvable]

Property cenId: The ID of the CEN instance.

---

firewall_switch^Required

• Type: typing.Union[str, ros_cdk_core.IResolvable]

Property firewallSwitch: Specifies whether to enable the VPC firewall.

Valid values: open: After you create the VPC firewall, the VPC firewall is automatically enabled. This is the default value. close: After you create the VPC firewall, the VPC firewall is disabled. You can call the ModifyVpcFirewallCenSwitchStatus operation to manually enable the VPC firewall.

---

firewall_vpc_zone_id^Required

• Type: typing.Union[str, ros_cdk_core.IResolvable]

Property firewallVpcZoneId: The ID of the zone to which the vSwitch belongs.

If your service is latency-sensitive, you can specify the same zone for the vSwitch of the firewall and the vSwitch of your business VPC to minimize latency.If you do not specify a value, a zone is automatically assigned for the vSwitch.

---

network_instance_id^Required

• Type: typing.Union[str, ros_cdk_core.IResolvable]

Property networkInstanceId: The ID of the VPC for which you want to create the VPC firewall.

---

vpc_firewall_name^Required

• Type: typing.Union[str, ros_cdk_core.IResolvable]

Property vpcFirewallName: The instance name of the VPC firewall.

---

vpc_region^Required

• Type: typing.Union[str, ros_cdk_core.IResolvable]

Property vpcRegion: The ID of the region to which the VPC belongs.

---

firewall_vpc_cidr_block^Optional

• Type: typing.Union[str, ros_cdk_core.IResolvable]

Property firewallVpcCidrBlock: The CIDR block of the VPC that is automatically created for the VPC firewall.

You must specify a CIDR block for the Cloud_Firewall_VPC VPC that is automatically created for the VPC firewall for traffic redirection. The subnet mask of the CIDR block must be less than or equal to 28 bits in length.If you do not specify a value, the CIDR block 10.0.0.0/8 is automatically allocated.

---

firewall_v_switch_cidr_block^Optional

• Type: typing.Union[str, ros_cdk_core.IResolvable]

Property firewallVSwitchCidrBlock: The CIDR block of the vSwitch that is automatically created for the VPC firewall.You must specify a CIDR block for the Cloud_Firewall_VSWITCH VPC that is automatically created for the VPC firewall for traffic redirection. The CIDR block does not conflict with your network plan. The subnet mask of the CIDR block must be less than or equal to 29 bits in length. The CIDR block of the vSwitch must be within the network segment of the VPC.If you do not specify a value, the CIDR block 10.219.219.216\/29 is automatically allocated.

---

member_uid^Optional

• Type: typing.Union[str, ros_cdk_core.IResolvable]

Property memberUid: The UID of the member that is managed by your Alibaba Cloud account.

---

v_switch_id^Optional

• Type: typing.Union[str, ros_cdk_core.IResolvable]

Property vSwitchId: The ID of the vSwitch that is used to associate with the elastic network interface (ENI) required by the VPC firewall.

---

enable_resource_property_constraint^Optional

• Type: bool

---

Methods

Name	Description
to_string	Returns a string representation of this construct.
synthesize	Allows this construct to emit artifacts into the cloud assembly during synthesis.
add_condition	No description.
add_count	No description.
add_dependency	No description.
add_resource_desc	No description.
apply_removal_policy	No description.
get_att	No description.
set_metadata	No description.

---

to_string

def to_string() -> str

Returns a string representation of this construct.

synthesize

def synthesize(
  session: ISynthesisSession
) -> None

Allows this construct to emit artifacts into the cloud assembly during synthesis.

This method is usually implemented by framework-level constructs such as Stack and Asset as they participate in synthesizing the cloud assembly.

session^Required

• Type: ros_cdk_core.ISynthesisSession

The synthesis session.

---

add_condition

def add_condition(
  condition: RosCondition
) -> None

condition^Required

• Type: ros_cdk_core.RosCondition

---

add_count

def add_count(
  count: typing.Union[typing.Union[int, float], IResolvable]
) -> None

count^Required

• Type: typing.Union[typing.Union[int, float], ros_cdk_core.IResolvable]

---

add_dependency

def add_dependency(
  resource: Resource
) -> None

resource^Required

• Type: ros_cdk_core.Resource

---

add_resource_desc

def add_resource_desc(
  desc: str
) -> None

desc^Required

• Type: str

---

apply_removal_policy

def apply_removal_policy(
  policy: RemovalPolicy
) -> None

policy^Required

• Type: ros_cdk_core.RemovalPolicy

---

get_att

def get_att(
  name: str
) -> IResolvable

name^Required

• Type: str

---

set_metadata

def set_metadata(
  key: str,
  value: typing.Any
) -> None

key^Required

• Type: str

---

value^Required

• Type: typing.Any

---

Static Functions

Name	Description
is_construct	Return whether the given object is a Construct.

---

is_construct

import ros_cdk_cloudfw
ros_cdk_cloudfw.VpcFirewallCen.is_construct(
  x: typing.Any
)

Return whether the given object is a Construct.

x^Required

• Type: typing.Any

---

Properties

Name	Type	Description
node	ros_cdk_core.ConstructNode	The construct tree node associated with this construct.
ref	str	No description.
stack	ros_cdk_core.Stack	The stack in which this resource is defined.
resource	ros_cdk_core.RosResource	No description.
attr_vpc_firewall_id	ros_cdk_core.IResolvable	Attribute VpcFirewallId: The instance ID of the VPC firewall.

---

node^Required

node: ConstructNode

• Type: ros_cdk_core.ConstructNode

The construct tree node associated with this construct.

---

ref^Required

ref: str

• Type: str

---

stack^Required

stack: Stack

• Type: ros_cdk_core.Stack

The stack in which this resource is defined.

---

resource^Optional

resource: RosResource

• Type: ros_cdk_core.RosResource

---

attr_vpc_firewall_id^Required

attr_vpc_firewall_id: IResolvable

• Type: ros_cdk_core.IResolvable

Attribute VpcFirewallId: The instance ID of the VPC firewall.

---